Chapter 3 Restricting Access From Your Network

Transcription

1 Chapter 3 Restricting Access From Your Network This chapter describes how to use the content filtering and reporting features of the RangeMax Dual Band Wireless-N Router WNDR3300 to protect your network. You can find these features by selecting the items under Content Filtering in the main menu of the browser interface. This chapter includes the following sections: Content Filtering Overview Blocking Access to Internet Sites Blocking Access to Internet Services on page 3-3 Scheduling Blocking on page 3-5 Viewing Logs of Web Access or Attempted Web Access on page 3-6 Configuring Alert and Web Access Log Notifications on page 3-7 Setting the Time on page 3-9 Content Filtering Overview The RangeMax Dual Band Wireless-N Router WNDR3300 provides you with Web content filtering options, plus browser activity reporting and instant alerts through . Parents and network administrators can establish restricted access policies based on time of day, Web addresses, and Web address keywords. You can also block Internet access by applications and services, such as chat rooms or games. To configure these features of your router, select the items under Content Filtering in the main menu of the browser interface. This chapter describes the screens that display. Blocking Access to Internet Sites The WNDR3300 router allows you to restrict access based on Web addresses and Web address keywords. Up to 255 entries are supported in the Keyword list. Restricting Access From Your Network 3-1

2 Here are some keyword application examples: If the keyword XXX is specified, the URL is blocked. If the keyword.com is specified, only websites with other domain suffixes (such as.edu,.org, or.gov) can be viewed. To block access to Internet sites: 1. Select Block Sites under Content Filtering in the main menu. The Block Sites screen displays. Figure Enable keyword blocking by selecting either Per Schedule or Always. To block by schedule, be sure to specify a time period in the Schedule screen. For information about scheduling, see Scheduling Blocking on page 3-5. Block all access to Internet browsing during a scheduled period by entering a dot (.) as the keyword, and then set a schedule in the Schedule screen. 3. Add a keyword or domain by entering it in the keyword field and clicking Add Keyword. The keyword or domain name then appears the Block sites containing these keywords or domain names list. 3-2 Restricting Access From Your Network

3 Delete a keyword or domain name by selecting it from the list and clicking Delete Keyword. 4. You can specify one trusted user, which is a computer that is exempt from blocking and logging. Specify a trusted user by entering that computer s IP address in the Trusted IP Address fields. Since the trusted user is identified by IP address, you should configure that computer with a fixed IP address. 5. Click Apply to save all your settings in the Block Sites screen. Blocking Access to Internet Services The WNDR3300 router allows you to block the use of certain Internet services by computers on your network. This is called service blocking or port filtering. Services are functions performed by server computers at the request of client computers. For example, Web servers serve Web pages, time servers serve time and date information, and game hosts serve data about other players moves. When a computer on your network sends a request for service to a server computer on the Internet, the requested service is identified by a service or port number. This number appears as the destination port number in the transmitted IP packets. For example, a packet that is sent with destination port number 80 is an HTTP (Web server) request. To block access to Internet services: 1. Select Block Services under Content Filtering in the main menu. The Block Services screen displays. Figure 3-2 Restricting Access From Your Network 3-3

4 2. Enable service blocking by selecting either Per Schedule or Always, and then click Apply. To block by schedule, be sure to specify a time period in the Schedule screen. For information about scheduling, see Scheduling Blocking on page Specify a service for blocking by clicking Add. The Block Services Setup screen displays. Figure From the Service Type list, select the application or service to be allowed or blocked. The list already displays several common services, but you are not limited to these choices. To add any additional services or applications that do not already appear, select User Defined. 5. Select the radio button for the IP address configuration you want to block, and then enter the IP addresses in the appropriate fields. 6. Click Add to enable your Block Services Setup selections. Configuring a User-Defined Service To define a service, first you must determine which port number or range of numbers is used by the application. The service port numbers for many common protocols are defined by the Internet Engineering Task Force (IETF) and published in RFC1700, Assigned Numbers. Service numbers for other applications are typically chosen from the range 1024 to by the authors of the application. You can often determine port number information by contacting the publisher of the application, by asking user groups or newsgroups, or by searching. 3-4 Restricting Access From Your Network

5 Enter the starting port and ending port numbers. If the application uses a single port number, enter that number in both fields. If you know that the application uses either TCP or UDP, select the appropriate protocol. If you are not sure, select Both. Blocking Services by IP Address Range In the Filter Services For area, you can block the specified service for a single computer, a range of computers (having consecutive IP addresses), or all computers on your network. Scheduling Blocking The WNDR3300 router allows you to specify when blocking is enforced. To schedule blocking: 1. Select Schedule under Content Filtering in the main menu. The Schedule screen displays. Figure Configure the schedule for blocking keywords and services: Restricting Access From Your Network 3-5

6 a. Days to Block. Select days on which you want to apply blocking by selecting the appropriate check boxes. Select Every Day to select the check boxes for all days. Click Apply. b. Time of Day to Block. Select a start and end time in 24-hour format. Select All Day for 24-hour blocking. Click Apply. Be sure to select your time zone in the screen as described in Setting the Time on page Click Apply to save your settings. Viewing Logs of Web Access or Attempted Web Access The log is a detailed record of the websites you have accessed or attempted to access. Up to 128 entries are stored in the log. Log entries appear only when keyword blocking is enabled and no log entries are made for the trusted user. Select Logs under Content Filtering in the main menu. The Logs screen displays. Figure Restricting Access From Your Network

7 Table 3-1 describes the log entries. Table 3-1. Log Entry Descriptions Field Date and time Source IP Target address Action Description The date and time the log entry was recorded. The IP address of the initiating device for this log entry. The name or IP address of the website or newsgroup visited or to which access was attempted. Whether the access was blocked or allowed. To refresh the log screen, click the Refresh button. To clear the log entries, click the Clear Log button. To the log immediately, click the Send Log button. Configuring Alert and Web Access Log Notifications To receive logs and alerts by , you must provide your account information. To configure alert and web access log notifications: 1. Select under Content Filtering in the main menu. The screen displays. Restricting Access From Your Network 3-7

8 Figure To receive logs and alerts from the router, select the Turn Notification On check box. a. Enter the name of your ISP s outgoing (SMTP) mail server (such as mail.myisp.com) in the Your Outgoing Mail Server field. You might be able to find this information in the configuration screen of your program. If you leave this field blank, log and alert messages will not be sent by . b. Enter the address to which logs and alerts are sent in the Send To This Address field. This address will also be used as the From address. If you leave this field blank, log and alert messages will not be sent by If your server requires authentication, select the My Mail Server requires authentication check box. a. Enter your user name for the server in the User Name field. b. Enter your password for the server in the Password field. 3-8 Restricting Access From Your Network

9 4. You can specify that logs are automatically sent by with these options: Send alert immediately. Select this check box for immediate notification of attempted access to a blocked site or service. Send Logs According to this Schedule. Specifies how often to send the logs: Hourly, Daily, Weekly, or When Full. Day. Specifies which day of the week to send the log. Relevant when the log is sent weekly or daily. Time. Specifies the time of day to send the log. Relevant when the log is sent daily or weekly. If you select the Weekly, Daily, or Hourly option and the log fills up before the specified period, the log is automatically ed to the specified address. After the log is sent, the log is cleared from the router s memory. If the router cannot the log file, the log buffer might fill up. In this case, the router overwrites the log and discards its contents. 5. Click Apply to save your settings. So that the log entries are properly time-stamped and sent at the correct time, be sure to set the time as described in the next section. Setting the Time The WNDR3300 router uses the Network Time Protocol (NTP) to obtain the current time and date from one of several network time servers on the Internet. To localize the time for your log entries, you must specify your time zone: Time Zone. Select your local time zone. This setting is used for the blocking schedule and for time-stamping log entries. Automatically Adjust for Daylight Savings Time. Select this check box if your region supports daylight savings time. The router will automatically adjust the time at the start and end of the daylight savings time period. Restricting Access From Your Network 3-9

10 3-10 Restricting Access From Your Network